
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
File: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft (raw, json)
Hash identifier: +lB6C+2vWGnOA+RxxZsmff7jtPzYtZV6IOeI68QAhY8=
Subject key identifier: 2B:53:8D:33:98:4F:D0:2B:48:FF:4A:18:D6:BB:A3:22:B5:95:81:8E
Authority key identifier: 62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
Certificate issuer: /CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Certificate serial: 019CE3A2DC57CF8FF0C9E7F6D21F1EAAABB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
Manifest number: 53
Signing time: Thu 12 Mar 2026 20:00:27 +0000
Manifest this update: Thu 12 Mar 2026 20:00:27 +0000
Manifest next update: Fri 13 Mar 2026 20:00:27 +0000
Files and hashes: 1: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl (hash: aysRIigRE+fGePNpMDP5wfY6E7Bm+U3wlwYfhwzSXwg=)
2: dfKf0SUwjmWHGeIDN6xaPuWneS0.roa (hash: KNktDMnqe7pkdReM74aezUUfDskVVEXdt3/JJZM1pKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:a2:dc:57:cf:8f:f0:c9:e7:f6:d2:1f:1e:aa:ab:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Validity
Not Before: Mar 12 20:00:27 2026 GMT
Not After : Mar 13 20:00:27 2026 GMT
Subject: CN=2b538d33984fd02b48ff4a18d6bba322b595818e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f9:f1:3f:8f:53:37:31:7c:2e:61:ba:a0:7a:
4c:bb:5b:d9:95:ed:7a:97:4f:46:85:c7:25:3b:1f:
58:42:cf:84:a7:02:33:a2:8e:0a:3b:72:ab:35:4b:
c6:9c:d0:77:e1:c6:6f:1b:3e:ac:31:75:da:db:4e:
a1:38:12:12:cb:08:3b:94:18:71:60:3b:b1:0c:c9:
e9:07:eb:99:d5:00:f6:60:70:2f:5e:7d:dc:8f:8d:
9f:55:7b:60:82:97:67:2f:56:28:5a:f3:43:82:01:
1e:bc:be:8b:ea:0a:27:e9:5f:b4:40:ad:7f:95:3e:
c2:5e:93:3b:81:c0:14:50:2b:36:f6:d3:d9:41:df:
4d:63:0e:03:bd:6a:6b:67:81:2c:c8:7d:60:f4:e2:
75:04:a4:f2:7f:2c:06:3b:c4:1a:7b:66:ed:6b:f3:
57:f3:c2:a3:53:f3:05:d5:8d:53:bd:1e:1e:77:8f:
7d:5b:7c:29:ef:29:58:70:92:b9:ee:44:99:df:4c:
38:a9:55:8e:9a:24:6c:84:b2:fd:f9:a5:7b:d8:89:
30:7f:85:94:ca:49:98:64:a1:d4:69:f8:41:f4:80:
07:22:15:63:3f:2f:41:10:aa:ba:3d:93:b5:d8:50:
93:d5:6c:87:ad:1e:16:0b:69:ef:d6:df:e2:f4:28:
17:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:53:8D:33:98:4F:D0:2B:48:FF:4A:18:D6:BB:A3:22:B5:95:81:8E
X509v3 Authority Key Identifier:
keyid:62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3a:ee:cf:c8:4d:c8:93:d5:dc:60:36:34:82:fe:a5:2e:52:
e2:04:47:40:a9:39:14:a5:4f:cb:fd:c9:c9:58:c4:20:6b:7e:
1a:be:5a:b7:9e:27:eb:fc:ad:50:ea:86:e8:30:1a:c3:48:5b:
e3:cd:b9:90:f2:7a:83:91:70:9d:33:1d:64:c8:c4:e7:7d:46:
88:83:e8:07:7a:f3:52:b1:fd:bf:f9:4a:97:7f:fe:05:d7:93:
43:5f:e9:a6:3f:c4:03:7a:ca:a8:fa:f6:c8:1b:e0:c2:b5:68:
bc:6d:f6:1b:26:d0:6e:2e:bc:86:04:46:d0:56:bc:64:6e:23:
a3:c7:c2:50:83:f1:17:6c:63:43:c9:c8:e8:3c:7a:c5:91:13:
7d:a2:cc:60:21:d5:1b:f8:76:3a:2e:88:8c:52:38:3a:41:12:
c8:23:ee:bd:cf:95:34:ff:31:9b:7a:0c:08:1f:06:f6:d5:16:
2f:ea:32:54:fb:6e:80:83:31:fd:98:f1:4b:4c:97:0c:e6:a8:
f8:a7:d8:5f:d5:42:ab:79:e3:1e:2c:64:5e:57:ec:e1:66:62:
c2:00:c2:70:dd:d7:5a:60:97:e2:43:67:eb:3a:0c:aa:7f:11:
8d:8d:0b:e5:34:93:72:04:c2:a6:cd:53:15:fb:5d:cb:d7:8c:
fd:c6:8b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:26:12 2026 by rpki-client